IBM Batch job fails with ABEND 102 REASON 00000000
DUMP TITLE=CSQ1,ABN=102-00000000 ...  Mismatch code levels - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Your WebSphere MQ (WMQ) batch job abends with an abend 102 - 00000000
ABEND102 ABENDS102 S102

CAUSE
One reason for Abend 102-00000000 -

Mismatch in code levels between WMQ MSTR (Queue Manager) and the batch job

The S102 is occurring as the batch job is running with V701 libraries (for example, SCSQAUTH dataset which contains CSQBSRV, CSQBCON etc) against a V710 queue manager. In order to run against a V710 queue manager the V710 libraries need to be used by the batch job.
In order to connect to a V710 queue manager the application needs to run with a V710 SCSQAUTH. The V710 SCSQAUTH will allow an application to connect to both a V710 or a V701 queue manager.
This is documented in the Information Center (section 'z/OS: Planning for migration from WebSphere MQ version 7.0.1 to WebSphere MQ version 7. [http://publib.boulder.ibm.com/infocenter/wmqv7/v7r1/index.jsp?topic=%2Fcom.ibm.mq.doc%2Fmi77108_.htm]1';

 *

Per ' Application migration and interoperation [http://publib.boulder.ibm.com/infocenter/wmqv7/v7r1/index.jsp?topic=%2Fcom.ibm.mq.doc%2Fmi23001_.htm]' topic, WebSphere MQ does not support connecting server applications loading libraries from the earlier level to connect to a later level of queue manager. On z/OS the STEPLIB must reference the target libraries for the queue manager.

DIAGNOSING THE PROBLEM
In IPCS you can view level of CSQBSRV in the batch job address space.

STORAGE ----------------------------------
Command ===>
Address:
294D8210 DD2DD220 DD0CB6C7 D70BDAF8 DAF8D77B | ..K....GP..8.8P# |
294D8220 D748D748 A7F4000E C3E2D8C2 E2D9E540 | P.P.x4..CSQBSRV
294D8230 F2F0F1F2 F1F1F2F7 E4D2F8F3 F7F7F440 | 20121127UK83774| .
PTF UK83774is for Release ... 010 (V7.0.1)

RESOLVING THE PROBLEM
Correct the STEPLIB for the batch job to point to the V7.1.0 libraries.

HISTORICAL NUMBER
 04659 79L 000
47552 077 724

PRODUCT ALIAS/SYNONYM
 wmq mq

Question: I have an issues with V701 SCSQAUTH/SCSQANLE and MQ V8, my batch jobs receiving an ABEND (ABN=102-00000000). I have an issues with V701 SCSQAUTH/SCSQANLE and MQ V8, my batch jobs receiving an ABEND (ABN=102-00000000).

Answer: Correct the STEPLIB for the batch job to point to the V7.1.0 libraries.


IBM Modifying the default Monitoring Level and Sampling Rate in the J2EE v7.1.1.0.0 agent. - United States J2EE TEMA Monitoring Level Sampling Rate xml files CAMADALL CAMJ2INST DC WebLogic TECHNOTE (FAQ)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 US English

QUESTION
 How do I modify the default Monitoring Level and Sampling Rate in the new J2EE v7.1.1.0.0 agent?

ANSWER
In the older release of the J2EE agent (v6.2 FP6), there was an option to specify the Monitoring Level, Sampling Rate and other parameters (threshold values, time intervals, etc..) during the configuration phase of the agent itself. This is now not possible in the new J2EE agent v7.1.1.0.0 configuration panels as these options are not available anymore.

The default values for the Monitoring Level and the Sampling Rate are L1 and 2% respectively. If you want to change these default values permanently, then please make these changes.

In the $ITM_HOME/config (Unix) dir or %ITM_HOME%\TMAITM6 (Windows), you will find the <hostname>_yj.xml file. Make a copy of this file, then stop the agent and make changes to the parameters (see screenshot below) in the file. Save file, restart the agent. The new values will now be accepted in the agent. If you are deploying a new Weblogic application, stop the agent, modify the <hostname>_yj_<wls_instance>.xml file then restart the agent again.

[/support/docview.wss?uid=swg21700308&aid=1] [/support/docview.wss?uid=swg21700308&aid=1]

PRODUCT ALIAS/SYNONYM
 ITCAM ITCAM for J2EE DC JBoss WebLogic

Question:
Can I change the ITCAM J2EE Agent Monitoring Level via the TEPS in version 7.1.1?

In the 7.1 version of the J2EE agent I could use the Agent Configuration to change the Monitoring Level for the agent- https://www.ibm.com/support/knowledgecenter/en/SS3JRN_7.2.0/com.ibm.itcamfapps_ad.doc_72/J2EE_agent_tema_install_guide/step10.html

So how can I change the Monitoring Level in the 7.1.1 agent?

Answer:
In the older release of the J2EE agent (v6.2 FP6), there was an option to specify the Monitoring Level, Sampling Rate and other parameters (threshold values, time intervals, etc..) during the configuration phase of the agent itself. This is now not possible in the new J2EE agent v7.1.1.0.0 configuration panels as these options are not available anymore.

The default values for the Monitoring Level and the Sampling Rate are L1 and 2% respectively. If you want to change these default values permanently, then please make these changes.

In the $ITM_HOME/config (Unix) dir or %ITM_HOME%\TMAITM6 (Windows), you will find the <hostname>_yj.xml file. Make a copy of this file, then stop the agent and make changes to the parameters (see screenshot below) in the file. Save file, restart the agent. The new values will now be accepted in the agent. If you are deploying a new Weblogic application, stop the agent, modify the <hostname>_yj_<wls_instance>.xml file then restart the agent again.


IBM Availability of features in the 64-bit version of Rational Rhapsody (8.0.3 and later) - United States rhapsody; windows 64-bit PRODUCT DOCUMENTATION

ABSTRACT
 This table presents information on the availability of features in the 64-bit version of Rational Rhapsody. Features not listed here have been available in the 64-bit version since it was first released.

CONTENT

[/support/docview.wss?uid=swg27038779&aid=1] 803 804 805 806 81 811 812 8121 813 814 815 82 821 83 Rational Rhapsody Architect for Software N N N N N N N N N N N N Y Y Reverse engineering - for languages other than Ada N N N N N N N N N N Y Y Y Y Roundtripping - for languages other than Ada – component level N N N N N N N N N N Y Y Y Y Roundtripping - for languages other than Ada – individual classes N N N N N N N N N N N Y Y Y Code-centric mode (without code-generation) N N N N N N N N N N N N N Y Action language N N N N N N N N N N N N N N SCC-based configuration management tool integrations: [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1]  *

N N N N N N N N N N N N N N  *

N N N N N N N N N N N N N N  *

N N N N N N N N N N N N N N  *

N N N N N N N N N N N N N N Rational Team Concert direct integration (RTC actions within Rhapsody) NA NA NA NA NA NA NA NA NA NA NA Y Y Y Rational System Architect import N N N N N N N N N N N N N N Webify (web-enabling a model) N N N N N N N N N N N N N N TeamCenter integration N N N N N N N N N N N N NA NA Rational DOORS integration (via internal interface, not Gateway) NA NA NA NA NA NA NA NA NA NA NA NA NA NA Rational Rhapsody ReporterPlus N N N N N N N N N N N N Y Y WindRiver Workbench 3.3 integration N N N N N N N N N N N N N N Visual Basic for Applications (VBA) N N N N N N N N N N NA NA NA NA Tornado IDE integration N N N N NA NA NA NA NA NA NA NA NA NA [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] N – not available
Y – available
NA – not available in 32-bit version either [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1]

Question:
Reporting in Rhapsody

Hello All,

I can't find the reports plus in my Rhapsody v8.1.2 x64

anybody knows the reason.

Answer: Rational Rhapsody ReporterPlus N N N N N N N N N N N N Y Y WindRiver Workbench 3.3 integration N N N N N N N N N N N N N N Visual Basic for Applications (VBA) N N N N N N N N N N NA NA NA NA Tornado IDE integration N N N N NA NA NA NA NA NA NA NA NA NA [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] [/support/docview.wss?uid=swg27038779&aid=1] N – not available


IBM LDAP allows authentication for only some users in Atlas. - United States atlas; pss TECHNOTE (FAQ)

QUESTION
 We have configured a new LDAP server in Atlas but why does authentication work for only some users ?

CAUSE
Atlas login fails with "Authentication failed: Unknown user (or) password"

ANSWER
Make sure the user who failed to login exists in Atlas and is active. If not , create the corresponding user manually or use HR Loader to import those users who are part of the new LDAP server.

Question: We have configured a new LDAP server in Atlas but why does authentication work for only some users ? We have configured a new LDAP server in Atlas but why does authentication work for only some users ?

Answer: Make sure the user who failed to login exists in Atlas and is active. If not , create the corresponding user manually or use HR Loader to import those users who are part of the new LDAP server.


IBM Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4943, CVE-2015-4941, CVE-2015-4942) - United States  SECURITY BULLETIN

SUMMARY
 A number of malformed MQTT client flows could be issued by a malicious user to cause the MQXR service to abend and require manual restart.

VULNERABILITY DETAILS
CVEID: CVE-2015-4943 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4943]
DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of connect and disconnects which will have to be restarted.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/104516 [https://exchange.xforce.ibmcloud.com/vulnerabilities/104516] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)
CVEID: CVE-2015-4941 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4941]
DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service due to incorrect handling of abbreviated TLS handshake.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/104514 [https://exchange.xforce.ibmcloud.com/vulnerabilities/104514] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVEID: CVE-2015-4942 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4942]
DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service using a sequence of connect and disconnects which will have to be restarted.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/104515 [https://exchange.xforce.ibmcloud.com/vulnerabilities/104515] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)

AFFECTED PRODUCTS AND VERSIONS
IBM WebSphere MQ 8.0

 - IBM WebSphere MQ 8.0.0.3 and earlier maintenance levels

IBM WebSphere MQ 7.5

 - IBM WebSphere MQ 7.5.0.5 and earlier maintenance levels

IBM WebSphere MQ 7.1

 - IBM WebSphere MQ 7.1.0.6 and earlier maintenance levels

REMEDIATION/FIXES
WebSphere MQ 8.0

 - Apply fixpack 8.0.0.4 [http://www-01.ibm.com/support/docview.wss?uid=swg21969244]

WebSphere MQ 7.5

 - Apply interim ifix IT09866 [http://www-933.ibm.com/support/fixcentral/swg/selectFixes?parent=ibm~WebSphere&product=ibm/WebSphere/WebSphere+MQ&release=7.5.0.5&platform=All&function=aparId&apars=IT09866]

WebSphere MQ 7.1

 - Apply fixpack 7.1.0.7 [http://www-01.ibm.com/support/docview.wss?uid=swg21965293]

WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

ACKNOWLEDGEMENT
Reported to IBM by Codenomicon at http://www.codenomicon.com/ [http://www.codenomicon.com/]

CHANGE HISTORY
 01 February 2016: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

RELATED INFORMATION
 A Japanese translation is available [http://www.ibm.com/support/docview.wss?uid=swg21977182]

Question: Help with Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4941) Help with Security Bulletin: Malformed client flows abend MQTT channel (CVE-2015-4941)

Answer:
CVEID: CVE-2015-4941 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4941]
DESCRIPTION: IBM WebSphere MQ could allow a remote attacker to crash the MQXR service due to incorrect handling of abbreviated TLS handshake.
CVSS Base Score: 5
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/104514 [https://exchange.xforce.ibmcloud.com/vulnerabilities/104514] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P)


IBM Ignorable SYSIBMADM.DBCFG IS AN UNDEFINED NAME error message - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 On Z/OS, Events runtime may trace the following exception into system logs when DB2 is used as the runtime repository:
com.ibm.websphere.ce.cm.StaleConnectionException: SYSIBMADM.DBCFG IS AN UNDEFINED NAME. SQLCODE=-204, SQLSTATE=42704, DRIVER=3.65.102

SYMPTOM
com.ibm.websphere.ce.cm.StaleConnectionException: SYSIBMADM.DBCFG IS AN UNDEFINED NAME. SQLCODE=-204, SQLSTATE=42704, DRIVER=3.65.102 is logged.

CAUSE
DB2 SYSIBMADM.DBCFG table view does not exist on Z/OS.

RESOLVING THE PROBLEM
This error message can be safely ignored.

Question: SYSIBMADM.DBCFG IS AN UNDEFINED NAME error message on z/OS ODM Event Server On Z/OS, Events runtime may trace the following exception into system logs when DB2 is used as the runtime repository: com.ibm.websphere.ce.cm.StaleConnectionException: SYSIBMADM.DBCFG IS AN UNDEFINED NAME. SQLCODE=-204, SQLSTATE=42704, DRIVER=3.65.102

Answer: This error message can be safely ignored.


IBM Change HSQLDB password - United States netcool; impact; netcool/impact; nci; hsql; database; data; base; db; hsqldb; pass; word; password; pw; sa; system; admin; systemadmin; security; sec; authentication; auth; vulnerable; vulnerability; change; alter; update TECHNOTE (FAQ)

QUESTION
 The default password does not fulfil corporate security requirements.

CAUSE
The default password is blank

ANSWER
Looking into guides for this third party software shows HSQLDB command line capability as being:

 *
 * SET PASSWORD
 *
 *
 * SET PASSWORD <password>;
 *
 *
 * Changes the password of the currently connected user. Password must be double quoted. Empty password can be set using "".

An example of changing the password in HSQLDB as above by connecting to the database:

 *
 *
 *
 *
 *

and issuing the command:

 *

quitting:

 *

and logging back in with the new password:

 *
 *
 *
 *
 *

The above example login uses the default ImpactServer name (NCI) and HSQLDB port number (5435). The default password is blank.

One will have to edit the HSQLDB DataSource to enable it to connect to the database with the new password.

A) One method is by encrypting the password and editing the HSQLDB DataSource to allow DSA connection. Use nci_crypt to encrypt the password - for example:

 *
 *
 *

edit the file:

 *

to alter the property:

 *

from the default value of {aes}9C71E0F544E705326E2B5CBDFC54CE46 to the new encrypted password value - for example:

 *

This requires an ImpactServer restart to enable.

B) An alternate method is to edit the DataSource via the normal Impact configuration GUI and provide the new password there. This alternate method has the advantage that one does not need to perform the encryption oneself, nor does one need to manually edit the configuration file and nor does one need to perform an ImpactServer restart to read up the new configuration into the memory resident database that is the ImpactServer.

Question: Netcool/Impact 6.1.0: How to change the HSQLDB password? Netcool/Impact 6.1.0: How to change the HSQLDB password?

Answer:
SET PASSWORD
 *
 *
 * SET PASSWORD <password>;
 *
 *
 * Changes the password of the currently connected user.


IBM ITCAM Data Collector for WebSphere V7.2 fixes - United States  FIX README

ABSTRACT
 IBM Tivoli Composite Application Manager Data Collector for WebSphere V7.2 fixes

CONTENT
Installation Instructions
Refer to the README file located in Fix Central for additional information

Download
What is Fix Central? [http://www.ibm.com/support/fixcentral/help?page=swfaqs] RELEASE DATE APAR numbers 7.2.0.0.15 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0015&includeSupersedes=0&source=fc] April 17, 2018 PI12540 PI66965 PI70320 PI72648 PI78728 PI78731 PI79097 PI81694 PI83644 PI83841 PI84543 PI86304 PI86589 PI87809 PI87994 PI88830 PI91448 PI92916 PI92459 PI93985 PI94733 PI94742 PI95349 PI95968 7.2.0.0.14 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0014&includeSupersedes=0&source=fc] March 9, 2017 IV85603 PI05433 PI67994 PI52132 PI52407 PI71243 PI22174 PI71124 PI22832 IV88814 IV88264 IV84761 IV84209 7.2.0.0.13 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0013&includeSupersedes=0&source=fc] May 6, 2016 PI48106 PI53964 PI41634 PI53691 PI52367 PI51119 PI57148 PI59839 PI42952 PI39907 PI42603 7.2.0.0.12 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0012&includeSupersedes=0&source=fc] Jan 6, 2016 PI30133 PI35027 PI35893 PI34945 PI39525 PI43321 PI48106 PI53964 PI41634 PI53691 7.2.0.0.11 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0011&includeSupersedes=0&source=fc] Apr 21, 2015 PI11450 PI16745 PI18682 PI21062 PI24319 PI25035 PI25663 PI27187 PI33891 PI34061 PI35680 PI36215 PI37162 PM70256 PM74078 PM75193 PM75581 PM87883 PM93570 IV47342 IV69645 7.2.0.0.10 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0010&includeSupersedes=0&source=fc] Oct 8, 2014 PM98778 PI06311 PI07084 PI22743 PI08200 PM88373 PM99070 PM94101 IV47342 PI06761 PI08473 PI08257 7.2.0.0.9 This is Limited Availability Interim Fix. Please contact Customer Support to obtain this fix . 7.2.0.0.8 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0008&includeSupersedes=0&source=fc] Oct 18, 2013 PM93570 7.2.0.0.7 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0007&includeSupersedes=0&source=fc] Oct 18, 2013 7.2.0.0.6 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0006&includeSupersedes=0&source=fc] Oct 18, 2013 PM88373 7.2.0.0.5 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0005&includeSupersedes=0&source=fc] Oct 18, 2013 7.2.0.0.4 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0004&includeSupersedes=0&source=fc] Oct 18, 2013 PM81890 PM79101 PM80120 PM88932 PM76203 7.2.0.0.3 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0003&includeSupersedes=0&source=fc] Oct 17, 2013 PM82318 7.2.0.0.2 [http://www.ibm.com/support/fixcentral/swg/quickorder?product=ibm/Tivoli/Tivoli+Composite+Application+Manager+for+Applications&release=All&platform=All&function=fixId&fixids=7.2.0.0-TIV-ITCAM_DC-IF0002&includeSupersedes=0&source=fc] Oct 17, 2013 PM77662

Question: Is ITCAM Data Collector for WebSphere 7.2.0.0.14 available? Is ITCAM Data Collector for WebSphere 7.2.0.0.14 available?


IBM Fix list for IBM Content Navigator Version 3.0.0 - United States  PRODUCT DOCUMENTATION

ABSTRACT
 The following table contains the complete listing of fixes for Version 3.0.0.

CONTENT
APARs fixed in IBM Content Navigator Version 3.0.0

APAR Description IO24490 (IBM FileNet P8 users) When EDS is used to hide workflow properties in the in-basket filter, moving the input focus through each visible workflow property field with the tab key causes a null script error when the next field is hidden. This also causes the input focus to stop moving to the next visible field.
With this fix, the tab key moves the input focus through each of the visible fields. IO24492 (IBM Content Navigator for Microsoft Office users) When the LTPA token times out, the SSO Kerberos does not recover.
With this fix, the user connection is reestablished. IO24514 (IBM Content Manager users) Child attribute values are not exported with the other attributes. [https://cmdtsweb4.usca.ibm.com:9449/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/84947]
With this fix, the child attributes and the values are exported. IO24539 (IBM FileNet P8 users) When criteria are entered into the workflow in-basket filter, pressing the Enter key does not close the filter dropdown and apply the filter criteria.
With this fix, the Enter works as expected. IO24544 (IBM CMIS for Content Manager users) Administrators must restart CMIS after modifying the Content Manager data model for users to see the changes.
With this fix, the Content Manager configuration cache is cleared and the data model changes now appear. IO24653 (IBM Content Navigator for Microsoft Office users) Users are unable to select a different document class when adding an email from Outlook.
With this fix, users can change the document model class. IO24710 (IBM FileNet P8 users) When users attempt to download documents with the Download All action and the user does not have permission to open all of the documents, the user receives an error.
With this fix, the user receives a friendly error message that the user does not have sufficient permissions. IO24711 (IBM FileNet P8 users) After editing the properties of multiple documents or folders that have an entry template, the reference to the entry template is lost after changes are saved.
With this fix, the entry template information is retained. IO24745 (IBM FileNet P8 users) The annotateEdit HTML parameter is set to true but annotation editing remains enabled.
With this fix, the annotateEdit parameter disables annotation editing. IO24752 (IBM Content Navigator for Microsoft Office users) When the locale is set to a RTL orientation, some choice lists remain set to LTR.
With this fix, the choice list option orientation is set correctly. IO24757 (IBM CMIS for Content Manager users) When files of 0 byte length are encountered, the document id is not retrieved.
With this fix, the document id, cmis:contentStreamId, is available in the response metadata when using IBM Content Manager Search API. IO24759 (IBM Content Navigator users) When using the sample feature, the ‘Get Next’ button does not work.
With this fix, the ‘Get Next’ button retrieves the next document. IO24765 (IBM FileNet P8 users) When a search returns more than the maximum count of items, the count displays as 0.
With this fix, the message will reflect that the maximum count was exceeded. IO24777 (IBM CMIS for FileNet users) [https://cmdtsweb4.usca.ibm.com:9449/jazz/resource/itemName/com.ibm.team.workitem.WorkItem/84806]CMIS logs an error that parsing runtime descriptor failed.
With this fix, the error is no longer logged. IO24779 (IBM Content Manager users) Users are unable to select the role when adding users or groups to a search, teamspace, or entry template role in a repository configuration.
With this fix, the role can be selected. IO24784 (IBM Content Navigator users) Themes can not be saved.
With this fix, themes can be saved. IO24789 (IBM Content Navigator users) New inheritance security is not set to include document access rights for Owner, Author and Reader.
With this fix, the default document access rights are corrected. IO24790 (IBM Content Manager users) Users are unable to retrieve a worklist containing a very large number of work items.
With this fix, the worklist will display the list of work items. IO24791 (IBM Content Navigator users) Some TIFF images compressed in JPEG only shows a partial image preview.
With this fix, the complete image can be previewed. IO24803 (IBM Content Manager OnDemand users) Users can not sort a field containing a mapping in the OnDemand application group.
With this fix, the column can be sorted. IO24804 (IBM FileNet P8 users) For documents with replication mapping set as inbound only, all annotations appear to save without any error message but only the first annotation is saved with the content.
With this fix, the annotations are saved correctly. IO24807 (IBM Content Navigator users) The default desktop load fails if there are references to menu actions in a disabled plug-in.
With this fix, the default desktop will load and ignore the references to the disabled plugin. IO24808 (IBM FileNet P8 users) Text searches with a phrase containing a reserved word like "and" generates the wrong query.
With this fix, the query is generated correctly. IO24813 (IBM Content Manager uses) Some annotations created using other clients are not correctly displayed in the Daeja Virtual Viewer.
With this fix, the annotations are displayed correctly. IO24821 (IBM CMIS for FileNet users) The CMIS documentation for the allowedRepositories configuration property should have values separated by spaces.
With this fix, the documentation is corrected. IO24822 (IBM Content Navigator for Microsoft Office users) The Send file as link action removes custom subject.
With this fix, the custom subject setting is used. IO24825 (IBM Content Navigator users) The Move to folder action in the context menu is not working from within a teamspace when over 400 teamspaces exist.
With this fix, the action performs as expected. IO24826 (IBM Content Manager users) The work item list is not updated with the current owner after the work item owner has been changed and the item has been processed to the next step.
With this fix, the work item list is updated. IO24830 (IBM Content Navigator users) After viewing a document with the applet viewer, an error is found in the log: SRVE0190E: File not found: /applets/DropDown.gif
With this fix, the error does not occur. IO24831 (IBM Content Navigator users) Download All action should download all parts as a zip file when multiple documents are selected. IO24836 (IBM Content Navigator users) If the session expired login dialog is cancelled, the user is not logged out and the session is not expired.
With this fix, the user session is expired when Cancel is selected. IO24846 (IBM Content Navigator users) Change language and locale settings dialog do not display.
With this fix, the settings dialog appears. IO24847 (IBM Content Navigator for Microsoft Office users) After adding columns to the results list and the user selects to sort, the original list of columns is displayed.
With this fix, the updated list of columns is displayed for the sorted results. IO24861 (IBM Content Navigator for Microsoft Office users) When using drag-and-drop to add documents to a teamspace with multiple entry templates defined, if the user selects a different template there is an error message about folder selection.
With this fix, the folder selection is not lost so the error message does not appear. IO24865 (IBM Content Manager users) When a user tries to view the next or previous document in the list from the Daeja ViewONE Virtual viewer with the Properties pane open, the viewer hangs.
With this fix, the issue is resolved. IO24869 (IBM Image Service users) Users are unable to view federated annotations from Image Services.
With this fix, users can view the federated annotations. IO24871 (IBM Content Navigator users) The version of the document added to the Favorites list is not the same version opened.
With this fix, the same version that was added to the list is the same one opened. IO24880 (IBM Content Navigator users) When adding a document by clicking Add Document Using Entry Template, the repository root folder is automatically selected in the Save in field, and an error message is displayed if the logged in user does not have permission to save the document under the root folder.
With this fix, the repository root folder is not automatically selected. IO24883 (IBM Content Manager users) Some TIFF files can not be viewed when using the Content Manager applet viewer.
With this fix, the documents can be viewed. IO24884 (IBM Content Navigator for Microsoft Office users) When the results list is displaying the contents of a folder , users can not refresh the results.
With this fix, the folder contents can be refreshed. IO24886 (IBM Content Navigator for Microsoft Office users) For Content Manager user, if the name property is a string:ext type, the name does not appear.
With this fix, the name property is used for the document title. IO24909 (IBM Content Navigator users) When a multi-line value is first displayed in an entry template property layout text area field, the complete value is not displayed. The text area field does not resize to display the full value until the input focus enters the text area field.
With this fix, the text area displays the value as expected. IO24944 (IBM Content Manager users) Navigator does not allow a user to change the class of a document with content to another class if the user does not have permission to add content to the target class. IBM Content Manager does not require the permission to add content to the target class.
With this fix, the user can change the class. IO24949 IBM Content Manager OnDemand users) Decimal numbers are not sorted properly when the server is set to a locale that uses a comma to indicate the decimal place, i.e., French.
With this fix, decimal numbers are sorted properly. IO24952 (IBM Content Navigator users) In a load balanced environment, if the client IP address for a request changes for an active session, the application executes an invalid DNS look up for each request after the client IP address change which can add a significant delay to the time it takes to process each request.
With this fix, the invalid DNS look up is not executed. IO24953 (IBM Content Navigator for Microsoft Office users) When uploading a document, the user can manipulate the upload path and save documents in a restricted folder.
With this fix, the user to limited to folders they have permissions for. IO24965 (IBM FileNet P8 users) Sometimes adding the related child document fails.
With this fix, the child document provides an error that document import failed. IO24972 (IBM Content Manager users) When using a layout and a dependent property is linked to a foreign key, the dependent property is not displaying the default foreign key values when the parent property value changes.
With this fix, the foreign key default choices are updated properly as the user changes the parent property value. IO24973 (IBM Content Navigator users) When using the Paste action from the context menu to paste the password into the Password field, the login button is not enabled.
With this fix, the Paste action enables the Add button. IO24985 (IBM Content Navigator for Microsoft Office users) Users can not install on Windows 10 if .Net 4.6.2 is already installed.
With this fix, users can install on Windows 10. PJ44290 (IBM Collaboration Services users) When the document name is renamed with an extension, the first content element is not displayed as expected. Instead the user is prompted to download the content element as a document with the same extension.
With this fix, the content is downloaded with the correct extension. PJ44413 (IBM Case Manager users) When using Internet Explorer v11, the carriage return does not start a new line in a text area.
With this fix, the new line is created. PJ44420 (IBM CMIS for FileNet users) With CMIS v1.1, the "query" and "unfiled" links are throwing an error.
With this fix, the links do not cause an error.

Question: CR is not inserted for textarea using IE We are using IBM Case Manager 5.2.1.4 and IBM Content Navigator 2.0.3.7. Using Properties View Designer of Case Builder, we tried to input CR ("Enter") on the text area, but CR is not inserted. This issue occurs only on IE, not on Firefox or Chrome.

Answer:
PJ44413 (IBM Case Manager users) When using Internet Explorer v11, the carriage return does not start a new line in a text area.
With this fix, the new line is created.


IBM How to create a custom group/role for Cognos Workspace and/or Cognos Workspace Advanced - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 This document will explain the steps necessary to create a group or role within the Cognos Namespace that can be used to assign only rights for Cognos Workspace Advanced and/or Cognos Workspace (or as they were formerly known in 10.1.1 / 10.1 Business Insight Advanced and/or Business Insight.).

CAUSE
IBM Cognos Licensing might require a Group of Users to be able to only access Cognos Workspace or Cognos Workspace Advanced (Business Insight or Business Insight Advanced).

ENVIRONMENT
IBM Cognos Installation with Cognos Workspace (Business Insight) and Cognos Workspace Advanced (Business Insight Advanced).

RESOLVING THE PROBLEM
Based on the following steps the group or role will only have access to either Cognos Workspace (Business Insight) or Cognos Workspace Advanced (Business Insight Advanced). Even though the Role receives Traverse and Execute permissions for the Report Studio capability it will not be able to open Report Studio (this is only possible if you have Traverse and Execute permissions for the Professional User Interface Profile).

First create your group or role in the Cognos Namespace:

1. Launch IBM Cognos Administration

2. Select the Security Tab

3. Choose Users, Groups and Roles

4. Click on the Cognos namespace.

5. Click "New Role" or "New Group"

Then you will have to apply the following settings:
R=Read
T=Traverse
W=Write
X=Execute

Permissions on Capabilities [Cognos Administration->Capabilities]:
Cognos Viewer: TX
Run With Options: TX
Collaborate: TX
Executive Dashboard: TX
Executive Dahsboard -> Use Advanced Dashboard Features: TX (10.2.x and Up)
Executive Dahsboard -> Use Interactive Dashboard Features: TX (10.2.x and Up)
Report Studio: TX
Scheduling: TX
Watch Rules: TX

Report Studio Profiles: TX [This is "set properties" directly on Security Tab->User Interface Profiles]
Express: TX [This is below User Interface Profiles]

Permissions:
Public Folders: RTWX
Express Authors (on itself): RTX [Replace this with your Group located in Cognos Administration->Security tab->Users,Groups,Roles->Cognos-><your Express Group>]

To remove the Group/Role access to Cognos Workspace (Business Insight) do the following access:
Cognos Administration->Security Tab->Capabilities->Executive Dashboards (Cognos Workspace/Business Insight)->Set Properties
Your group/role then receives deny on Traverse and Execute.

To remove the Group/Role access to Cognos Workspace Advanced (Business Insight Advanced) do the following:
Cognos Administration->User Interface Profiles->Drop Down Symbol next to Express->Set Properties
Select your group and change Traverse and Execute to Deny.

You can create unique Groups/Roles to cater to every requirement separately.

Question:
Cognos Workspace Advanced Users are unable to see features. Why?

Certain Workspace Advanced users cannot open Report Studio. This happens with certain custom roles.

Environment: IBM Cognos 10.2.2.x

Answer: Based on the following steps the group or role will only have access to either Cognos Workspace (Business Insight) or Cognos Workspace Advanced (Business Insight Advanced). Even though the Role receives Traverse and Execute permissions for the Report Studio capability it will not be able to open Report Studio (this is only possible if you have Traverse and Execute permissions for the Professional User Interface Profile).


IBM Known Issues for DB2 on Linux - United States  TECHNOTE (FAQ)

QUESTION
 What are known issues on Linux platforms related to DB2® database products ?

ANSWER
Known Issues with DB2 on Linux

[/support/docview.wss?uid=swg21681093&aid=1]
Bug ID [/support/docview.wss?uid=swg21681093&aid=2]Description
Linux Flavor [/support/docview.wss?uid=swg21681093&aid=3]
Comments 1076574 DB2's 'db2syc' process exhibits memory leak. Redhat v6 DB2 'db2sysc' process will see memory leak. Eventually, RAM and swap will be 100% consumed. The machine will be non-responsive. This memory is released when DB2 engine is stopped with 'db2stop'.

This is a RedHat Linux issue and is discussed here:https://access.redhat.com/support/cases/01054560/ [https://access.redhat.com/support/cases/01054560/]

This problem is already fixed by RedHat. The detailed description of all the Redhat Linux versions affected by this bug and fix details are available at:https://rhn.redhat.com/errata/RHBA-2014-0470.html [https://rhn.redhat.com/errata/RHBA-2014-0470.html] 1042807 32-bit applications running on 64-bit platforms where issuing msgrcv with -ve message type hangs with error:
error: msgrcv: No message of the desired type. Redhat v7
kernel-3.10.0-54.0.1.e17.x86_64 32-bit application does not work on RHEL 7.0 with 64-bit DB2 engine. When the sample programs under sqllib/samples/c/ like inattach.c or dbinfo.c is compiled by bldapp with BITWIDTH=32, it hangs in sqlorqueInternal.

This is a RedHat Linux issue and is discussed here:
https://access.redhat.com/solutions/1202773 [https://access.redhat.com/solutions/1202773]

This problem will be fixed by RedHat in v7.1 1264533 DB2 Panic, due to removed IPC resources. Redhat v7.2 The problem is caused by logind removing IPC resources owned by user when this user logs off. The bug is described here:
https://bugzilla.redhat.com/show_bug.cgi?id=1264533 [https://bugzilla.redhat.com/show_bug.cgi?id=1264533]

Local Fix:
Add the following setting to file /etc/systemd/logind.conf
RemoveIPC=no 948149 db2dart reports incorrect container tag for container which resides on XFS SLES 12 This problem exists for XFS and only if container is opened in Direct IO mode. In reality the container tag is not corrupted but result buffer will return empty after pread call, which did not report any errors. More information here:
https://bugzilla.linux.ibm.com/show_bug.cgi?id=131069 [https://bugzilla.linux.ibm.com/show_bug.cgi?id=131069]

The problem is fixed in
kernel-default-3.12.32-33.1.x86_64.rpm

1165277 db2 local connections may hang in semop function Redhat/CentOS v6.6. The problem is caused by a IPC bug, first seen in kernel kernel 2.6.32-434.el6. More information here: https://bugzilla.linux.ibm.com/show_bug.cgi?id=119049 [https://bugzilla.linux.ibm.com/show_bug.cgi?id=119049]

Fixed in https://rhn.redhat.com/errata/RHSA-2015-1272.html [https://rhn.redhat.com/errata/RHSA-2015-1272.html]

Local Fix:
Configure local clients' connections through TCP/IP loopback.

Question:
RHEL7.2: CF servers crashed when db2cluster -cm -list -alert command issued Environment: DB2 11.1 GA / RHEL7.2

Whenever I execute "db2cluster -cm -list -alert", 0x80090030 logged in db2diag.log on member nodes. Finally CF servers become STOPPED status with high probability.

  2016-09-12-15.51.35.731323+540 I362836576E602       LEVEL: Severe
  PID     : 22991                TID : 70366596624816 PROC : db2sysc 0
  INSTANCE: db2inst1             NODE : 000           DB   : SAMPLE
  HOSTNAME: pscale00.ibm.com
  EDUID   : 112                  EDUNAME: db2LLMn2 (SAMPLE) 0
  FUNCTION: DB2 UDB, RAS/PD component, pdLogCaPrintf, probe:876
  DATA #1 : <preformatted>
  NotifyConn_t.wait (PsGetNotification:) failed: 0x80090030
  DATA #1 : <preformatted>
  If a CF return code is displayed above and you wish to get
  more information then please run the following command:

  db2diag -cfrc <CF_errcode>

Answer:
Add the following setting to file /etc/systemd/logind.conf
RemoveIPC=no


IBM TEP Login is failing for some LDAP users - United States KFW_AUTHORIZATION_USE_EWAS; TEPS; Login ; LDAP ADO; status 1021 TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The TEPS is configured to use LDAP (e.g. Microsoft Active Directory ) for user authentication.
Some LDAP user are able to login successfully, but some users are not able to login, why?

SYMPTOM
For some users that try to log into the TEPS, the following error is seen:

"KFWITM393E User ID or password is invalid"

The TEPS logs shows the error:
KFW1002I Starting Service: 'Startup Complete v2.0' (Thursday, August 28, 2014, 3:12:36 PM-{252C}ctserver.cpp,520, "CTServer::startServerDll") KFW1003I Started Service: 'Startup Complete
v2.0' (Thursday, August 28, 2014, 3:12:36 PM-{4D4}ctserver.cpp,975,
"CTServer::runORB") KFW1020I ********* Waiting for requests. Startup complete *********
(Thursday, August 28, 2014, 3:13:30 PM-{51C}kdssqrun.c,964,"CreatePath") Create Path Error. status 1021 path NCS:

CAUSE
The TEPS variable 'KFW_AUTHORIZATION_USE_EWAS'

RESOLVING THE PROBLEM
Please remove the TEPS variable 'KFW_AUTHORIZATION_USE_EWAS' from the KFWENV, then restart the TEPS and verify that all users can log in.

PRODUCT ALIAS/SYNONYM
 ITM
Monitoring

Question:
Unable to login to TEP with TEPS LDAP authentication TEPS LDAP has been configured correctly. User id can be searched successfully in eWAS.

The login appears to be attempting to authenticate with the HUB TEMS rather than going through Websphere to contact the LDAP server.

Answer: remove the TEPS variable 'KFW_AUTHORIZATION_USE_EWAS' from the KFWENV, then restart the TEPS and verify that all users can log in.


IBM SelfMonitoring events incorrectly cleared - United States netcool; impact; netcool/impact; nci; 610; self; monitoring; selfmonitoring; service; event; events; problem; resolution; clear; clears; generic; genericclear; delete; deleteclears; automation; object; server; objectserver; objserv; nco; omnibus TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 All SelfMonitoring Service problem (Service stopped) events are cleared by GenericClear if any single resolution (Service started) event is created

SYMPTOM
A Service is stopped and a SelfMonitoring (problem) event is sent to the ObjectServer.

Another Service is stopped and that too creates a SelfMonitoring (problem) event in the ObjectServer.

The second Service is then restarted and SelfMonitoring sends a resolution (Service started) events to the ObjectServer and this results in BOTH Service stopped events being set to Severity 0.

CAUSE
SelfMonitoring Service events do not include any details of the Service in question in the fields used by the GenericClear Automation in the ObjectServer to uniquely identify and correlate Problem and Resolution events - so any single SelfMonitoring Service Resolution event will correlate with ALL SelfMonitoring Service Problem events and set the Severity to 0 for the DeleteClears Automation to mop up.

DIAGNOSING THE PROBLEM
SelfMonitoring Service events for known stopped Services are vanishing when they shouldn't.

RESOLVING THE PROBLEM
The easy solution at this time is to upgrade to Fix Pack 1 or higher. One could go to the extremes of creating a PolicyActivator, polling at a higher rate than the GenericClear Automation, to run a Policy to pick-up these events, pull out the Service name from the Summary field and append it to the Agent field of the events so that the GenericClear Automation can uniquely identify and correlate Problem and Resolution events.

This problem is recorded by APAR IV13297 "ALERTKEY VALUE FOR SELFMONITORING (SERVICE) EVENTS DOES NOT INCLUDE SERVICE DETAILS, SO GENERICCLEAR CLEARS ALL SUCH EVENTS." [link below] and is fixed in IBM Tivoli Netcool/Impact V6.1.0 Fix Pack 1 (6.1.0-TIV-NCI-FP0001) [link below] and above.

RELATED INFORMATION
 APAR IV13297 [http://www-01.ibm.com/support/docview.wss?uid=swg1IV13297]
6.1.0-TIV-NCI-FP0001 [http://www-01.ibm.com/support/docview.wss?uid=swg24031658]

Question:
Netcool/Impact 6.1.0: SelfMonitoring events are being incorrectly cleared by OMNIbus GenericClear Automation Netcool/Impact 6.1.0: SelfMonitoring events are being incorrectly cleared by OMNIbus GenericClear Automation

When there are multiple SelfMonitoring events reporting stopped Impact Services and one of those Impact Services is restarted the resolution event is used by the OMNIbus GenericClear (and DeleteClears) Automations to delete ALL the events.

Answer: The easy solution at this time is to upgrade to Fix Pack 1 or higher. One could go to the extremes of creating a PolicyActivator, polling at a higher rate than the GenericClear Automation, to run a Policy to pick-up these events, pull out the Service name from the Summary field and append it to the Agent field of the events so that the GenericClear Automation can uniquely identify and correlate Problem and Resolution events.


IBM Health Check events Node and Domain and their interactions. - United States HealthCheck failed events; nco_p_ncpmonitor.rules; VirtualDomain TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 HealthCheck failed events are being received, nco_p_ncpmonitor.rules has been customized.

SYMPTOM
Although both the Primary and Backup domains are up and (according to their mutual VirtualDomain processes) are healthy, each is sending Health Check Failed events for the other domain.

CAUSE
This document only applies to those installations where the nco_p_ncpmonitor.rules file has been edited to modify the inserted value for @Node in alerts.status or where @Node is being modified for health check events by some other external process.

Each ITNM Gateway (ncp_ncogate) in the Primary and Backup domain retrieves health check events from alerts.status and constructs an update into the state.domains table in the VirtualDomain process. Please review the documentation in the 'Related Information' section below for more information on the Health Check process.

DIAGNOSING THE PROBLEM
When you run the ncp_ncogate process in debug you can see the update that the gateway makes in state.domains. The value for m_Domain should be the same as the Domain name for the Primary or the Backup domain. It should not be the name of the Virtual domain.

ProcessHealthCheck sent:update state.domains set m_HealthStatus=1 where m_Domain='ITNM';

RESOLVING THE PROBLEM
The value for m_Domain is taken from the value for Node (@Node) in alerts.status for the health check event. If you have altered the inserted value for @Node, either by modifying the nco_p_ncpmonitor.rules file or by some other method such as an Automation or Impact policy, then the resulting update for state.domains will fail. Ensure that the rules governing the modification of @Node allow for the value of @Node to remain unchanged for health check events.

RELATED INFORMATION
#failover [http://publib.boulder.ibm.com/infocenter/tivihelp/v8r1/topic/com.ibm.networkmanagerip.doc_3.8/itnm/ip/wip/install/concept/nmip_ins_failoverop.html]

Question: Does @LocalNodeAlias="" will affect ITNM failover health check events?. Customization in nco_p_monitor.rules with @LocalNodeAlias="empty", after that both Primary and Backup started health check fail event, how to resolve that.

Answer: The value for m_Domain is taken from the value for Node (@Node) in alerts.status for the health check event. If you have altered the inserted value for @Node, either by modifying the nco_p_ncpmonitor.rules file or by some other method such as an Automation or Impact policy, then the resulting update for state.domains will fail. Ensure that the rules governing the modification of @Node allow for the value of @Node to remain unchanged for health check events.


IBM SDA does not work for TEPS support files on ITCAM for SOA 7.2 FP1 ifix 5 - United States SDA TEPS "support files" SOA 7.2 FP1 ifix 5 TECHNOTE (FAQ)

QUESTION
 Why is my product support not being updated on TEPS (It's updated on TEMS) - from 7.2.0.1-TIV-ITCAMSOA-AIX-IF0005.tar.

CAUSE
 SOA includes an SDA package for the TEMS but not for TEPS.

ANSWER
Basically, it is working as it is coded for this version.

 User has to manually apply SOA 7.2 FP1 ifix 5 support files on TEPS.

 Doc Apar IV77933 is created to provide this information.

NOTE:
All version of ITCAM for SOA 7.2 requires to apply support files manually on TEPS.
None of the 7.2 installers include SDA support for TEPS. It is not limited to 7.2.0.1-TIV-ITCAMSOA-IF0005.

Question:
Do I need to manually apply SDA function for ITCAM for SOA 7.2 FP1 ifix 5? The SDA function for ITCAM for SOA 7.2 FP1 ifix 5 works for TEMS but IS NOT coded to work for TEPS. User is required to manually apply the support files on TEPS for this version (ifix 5).

does this need a manual apply for TEPS only for SOA 7.2, FP1 and ifix 5 ?"

Answer: User has to manually apply SOA 7.2 FP1 ifix 5 support files on TEPS.


IBM User receiving Notice Sender Execution Failed Alert after upgrading to Atlas 6.0.3.3 - United States  TECHNOTE (FAQ)

QUESTION
 Why does the user receive Notice Sender Execution Failed Alert after upgrading to Atlas 6.0.3.3?

CAUSE
The error message is "java.sql.SQLException: ORA-00604: error occurred at recursive SQL level 1 ORA-01628: max # extents (32765) reached for rollback" and is caused by MATTERPERFORMER_TEXT

ANSWER

 1. Backup Atlas Database
 2. Using sqlplus login to Atlas Database using PSSAPL user
 3. Run the Following commands in SQL prompt
 4. EXEC ddl_util.drop_index('MATTERPERFORMER_TEXT');
 5. EXEC ddl_util.drop_ctx_pref('MatterPerformer_Pref10G');
 6. commit;

Question: Why does the user receive Notice Sender Execution Failed Alert after upgrading to Atlas 6.0.3.3? Why does the user receive Notice Sender Execution Failed Alert after upgrading to Atlas 6.0.3.3?

Answer: The error message is "java.sql.SQLException: ORA-00604: error occurred at recursive SQL level 1 ORA-01628: max # extents (32765) reached for rollback" and is caused by MATTERPERFORMER_TEXT


IBM Using launchpad.sh or silent_MS_linux.bin results in end-of-file message. - United States ITCAM compat-libstdc++ libstdc++ libraries silent_MS_linux.bin launchpad.sh errors TECHNOTE (TROUBLESHOOTING)

THIS DOCUMENT APPLIES ONLY TO THE FOLLOWING LANGUAGE VERSION(S):
 US English

PROBLEM(ABSTRACT)
 Using the DC or MS 'launchpad.sh' script results in the following error message:
./setup_MS_lin.bin: line 1926: warning: here-document at line 1926
delimited by end-of-file (wanted `/dev/null')

SYMPTOM
The following error is seen running when doing either 'launchpad.sh' or 'silent_MS_linux.bin':

 Initializing InstallShield Wizard........
Launching InstallShield Wizard........

./setup_MS_lin.bin: line 1926: warning: here-document at line 1926
delimited by end-of-file (wanted `/dev/null')

The installer is unable to run in graphical mode. Try running the
installer with the -console for -silent flag.

CAUSE
Missing Linux system libraries.

ENVIRONMENT
Linux - RHEL6.x and RHEL7.x 64-bit versions.

RESOLVING THE PROBLEM
This error messag is seen because of some missing Linux libraries. Usually what's missing are the compat-libstdc++ or libstdc++ libraries. Usually the 32-bit version is missing. Use the commands shown below to verify you have them installed, otherwise contact your Linux system administrator and installt these required libraries.

[/support/docview.wss?uid=swg21985630&aid=1] [/support/docview.wss?uid=swg21985630&aid=1]
[/support/docview.wss?uid=swg21985630&aid=2] [/support/docview.wss?uid=swg21985630&aid=2]

PRODUCT ALIAS/SYNONYM
 ITCAM4AD ITCAMfAD ITCAM for App Diagnostics

Question: What does the end-file-message mean while doing a launchpad.sh in the MS" I am getting an end-file-message means while doing a launchpad.sh in the MS. How do I solve the problem?

Answer: Use the commands shown below to verify you have them installed, otherwise contact your Linux system administrator and installt these required libraries.


IBM Security Bulletin: Security vulnerability has been identified in Oracle MySQL shipped with IBM Tivoli Network Manager IP Edition (CVE-2017-3523) - United States  SECURITY BULLETIN

SUMMARY
 Oracle MySQL is shipped with IBM Tivoli Network Manager IP Edition. Information about a security vulnerability affecting Oracle MySQL has been published in a security bulletin.

VULNERABILITY DETAILS
Refer to the security bulletin listed in the Remediation/Fixes section

AFFECTED PRODUCTS AND VERSIONS
IBM Tivoli Network Manager 3.9

REMEDIATION/FIXES
Refer to the following security bulletins for vulnerability details and information about fixes addressed by Oracle MySQL which is shipped with IBM Tivoli Network Manager IP Edition.

Affected Product and Version(s) Product and Version shipped as a component Affected Supporting Product Security Bulletin IBM Tivoli Network Manager 3.9 IBM Tivoli Network Manager 3.9 shipped with MySQL Connector 5.6 Oracle Critical Patch Update Advisory - April 2017 [http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html] GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v3 Guide [http://www.first.org/cvss/user-guide]
On-line Calculator v3 [http://www.first.org/cvss/calculator/3.0]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

CHANGE HISTORY
 15 June 2017 : Original Version Published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: ITNM is vulnerable to CVE-2017-3523 ? Customer would like to know if ITNM versions is vulnerable to CVE-2017-5638? If yes then where we can find the details?.

Answer: Refer to the following security bulletins for vulnerability details and information about fixes addressed by Oracle MySQL which is shipped with IBM Tivoli Network Manager IP Edition.


IBM The Key Management Utility bundled with IBM HTTP Server V7.0 32-bit, and the WebSphere Application Server Web server plug-in 32-bit V7.0, displays an error when creating a PKCS12 keystore file - United States p12; pkcs12; ikeyman; v7.0; Plugin; Plug-in; JCE policy file TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 The Java version "1.6.0" new install with IBM HTTP Server V7.0 and the Web server plug-in V7.0 contains restricted policy files.

SYMPTOM
An error message displays when performing the following steps:

 1. Start the Key Management Utility.

 2. Select Key Database File > New. For Key database type, select PKCS12 and then click OK.

    [/support/docview.wss?uid=swg21395327&aid=1]

 3. Enter a new password and click OK.

The following error message is displayed:

The command cannot complete because your JRE is using restricted policy files.
CAUSE
Restricted JCE Policy files

RESOLVING THE PROBLEM
To resolve the problem, select either option:

 * Download and install a later Java 32-bit x86 AMD/Intel Java SDK from [http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24023707]the WebSphere Support web site [http://www.ibm.com/support/docview.wss?uid=swg24028881] to the IBM HTTP Server java and plug-ins java folder.

 * Download and install the files from the Unrestricted JCE policy files [https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk] site.

   After downloading the unrestricted JCE policy files, follow the instructions below to replace the restricted JCE policy files with the unrestricted JCE policy files.

Instructions:
1. Rename and move the restricted JCE Policy files indicated below from the <ihsinst>/java/jre/lib/security/ directory to a directory that is outside the JDK class path, extdirs, or bootclasspath.

local_policy.jar
US_export_policy.jar

2. Next, place the unrestricted JCE policy files in the <ihsinst>/java/jre/lib/security/ directory. They should be named local_policy.jar and US_export_policy.jar

3. Finally, restart the ikeyman utility to pick up the unrestricted JCE policy files now located in the security directory

Very Important Note: You will be offered two options to download. See screen shot below. The correct Unrestricted JCE policy files will depend on the JAVA SR version. This can be verified, Run java -version command from the <ihsinst>/java/jre/bin directory. The output will display the Java SR version.
For example: Java 1.6..0 version with SR12
[/support/docview.wss?uid=swg21395327&aid=2] [/support/docview.wss?uid=swg21395327&aid=2]

[/support/docview.wss?uid=swg21395327&aid=3] [/support/docview.wss?uid=swg21395327&aid=3]

Replacing the wrong Unrestricted JCE policy files, when retry to manage a PKCS12 keystore file the ikeyman utility will fail to open.the keystore file reporting the following error.

[/support/docview.wss?uid=swg21395327&aid=4]

Cross reference information Segment Product Component Platform Version Edition Application Servers WebSphere Application Server IBM HTTP Server Windows 7.0.0.5, 7.0.0.3, 7.0.0.1, 7.0

Question:
How to export key from SSL certificate in IBM HTTP Server 7; getting restricted policy error

We're trying to export our IHS 7 SSL key to PKCS12 format so we can use it on our Load Balancer, but it fails with some policy error:

     $/usr/IBM/HTTPServer/bin/gsk7cmd -cert -export -db /usr/IBM/HTTPServer/ssl/key.kdb -pw #### -label "domain1" -type cms -target /tmp/domain1.p12 -target_type PKCS12 -target_pw ####

     The command cannot complete because your JRE is using restricted policy files.

Same error happens in Ikeyman tool. Any ideas?

Answer:
To resolve the problem, select either option:

 * Download and install a later Java 32-bit x86 AMD/Intel Java SDK from [http://www-01.ibm.com/support/docview.wss?rs=180&uid=swg24023707]the WebSphere Support web site [http://www.ibm.com/support/docview.wss?uid=swg24028881] to the IBM HTTP Server java and plug-ins java folder.

 * Download and install the files from the Unrestricted JCE policy files [https://www14.software.ibm.com/webapp/iwm/web/preLogin.do?source=jcesdk] site.


IBM Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2014-3566 and CVE-2014-6457) - United States  SECURITY BULLETIN

SUMMARY
 There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 that is used by IBM PureApplication System. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption (POODLE) SSLv3 vulnerability (CVE-2014-3566). These were disclosed as part of the IBM Java SDK updates in October 2014.

VULNERABILITY DETAILS
CVEID: CVE-2014-6457 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457]

DESCRIPTION: An unspecified vulnerability related to the JSSE component has partial confidentiality impact, partial integrity impact, and no availability impact.

CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/97148 [https://exchange.xforce.ibmcloud.com/vulnerabilities/97148] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

CVE-ID: CVE-2014-3566 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566]

DESCRIPTION: Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a man-in-the-middle attack could exploit this vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) attack to decrypt SSL sessions and access the plaintext of encrypted connections.

CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/97013 [https://exchange.xforce.ibmcloud.com/vulnerabilities/97013] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)

AFFECTED PRODUCTS AND VERSIONS
IBM Image Construction and Composition Tool v2.2.1.3
IBM Image Construction and Composition Tool v2.3.1.0
IBM Image Construction and Composition Tool v2.3.2.0

REMEDIATION/FIXES
The solution is to apply the following IBM Image Construction and Composition Tool version fixes.

Upgrade the IBM Image Construction and Composition Tool to the following fix levels or higher:

 ForIBM Image Construction and Composition Tool v2.2.1.3

 *

 For IBM Image Construction and Composition Tool v2.3.1.0  *

 ForIBM Image Construction and Composition Tool v2.3.2.0  *

IBM recommends that you review your entire environment to identify areas that enable the SSLv3 protocol and take appropriate mitigation and remediation actions. The most immediate mitigation action that can be taken is disabling SSLv3. You should verify disabling SSLv3 does not cause any compatibility issues. WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

ACKNOWLEDGEMENT
None

CHANGE HISTORY
 15 May 2015: Original version published

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2014-3566 and CVE-2014-6457) I need to understand details regarding "Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Image Construction and Composition Tool (CVE-2014-3566 and CVE-2014-6457) ." Where can I find this information?

Answer:
CVEID: CVE-2014-6457 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6457]

DESCRIPTION: An unspecified vulnerability related to the JSSE component has partial confidentiality impact, partial integrity impact, and no availability impact.

CVSS Base Score: 4
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/97148 [https://exchange.xforce.ibmcloud.com/vulnerabilities/97148] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:H/Au:N/C:P/I:P/A:N)

CVE-ID: CVE-2014-3566 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3566]

DESCRIPTION: Product could allow a remote attacker to obtain sensitive information, caused by a design error when using the SSLv3 protocol. A remote user with the ability to conduct a man-in-the-middle attack could exploit this vulnerability via a POODLE (Padding Oracle On Downgraded Legacy Encryption) attack to decrypt SSL sessions and access the plaintext of encrypted connections.

CVSS Base Score: 4.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/97013 [https://exchange.xforce.ibmcloud.com/vulnerabilities/97013] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:N/A:N)


IBM SQL1763N error with Reason Code 11 while running "Alter Tablespace" command to reclaim unused storage space against DMS or automatic storage tablespaces. - United States SQL1763N; Alter Tablespace; reclaimable storage; DMS; Automatic storage table spaces; MON_GET_TABLESPACE; RECLAIMABLE_SPACE_ENABLED; SMS; DB2 Version 9.7; lower high water mark TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 Receiving SQL1763N error with Reason Code 11 while running "Alter Tablespace" command to reclaim unused storage space against DMS or automatic storage tablespaces.

SYMPTOM
Following reasons apply:

 * If the DMS or automatic storage tablespaces are not created in DB2 Version 9.7 or later, as the "Reclaimable Storage" is not available in tablespaces created in earlier versions(V9.1/V9.5) of the DB2 product.
 * Trying to alter a SMS tablespace as this feature is not supported on SMS tablespaces.

Example testcase on a TEMPSPACE1 SMS tablespace.

 *
 *
 * DB21034E The command was processed as an SQL statement because it was not a valid Command Line Processor command. During SQL processing it returned: SQL1763N Invalid ALTER TABLESPACE statement for table space "TEMPSPACE1" due to reason "11" SQLSTATE=429BC
 *

DIAGNOSING THE PROBLEM
MON_GET_TABLESPACE table function and RECLAIMABLE_SPACE_ENABLED monitor element can be used to identify whether the tablespace is enabled for reclaimable storage or not. Example:
db2 "SELECT varchar(tbsp_name, 30) as tbsp_name, tbsp_type, RECLAIMABLE_SPACE_ENABLED FROM TABLE(MON_GET_TABLESPACE('',-2))"

Snippet of the output:

TBSP_NAME TBSP_TYPE RECLAIMABLE_SPACE_ENABLED
----------------- ----------- -------------------------
SYSCATSPACE DMS 1
TEMPSPACE1 SMS 0
USERSPACE1 DMS 1

If the RECLAIMABLE_SPACE_ENABLED monitor element returns a value of 1, then the tablespace is enabled for reclaimable storage. Otherwise, it returns a value of 0.

RESOLVING THE PROBLEM
To use the reclaimable storage feature, make sure to create the DMS or automatic storage tablespaces in DB2 Version 9.7 or later. Example testcase on SYSCATSPACE DMS tablespace which has reclaimable storage enabled.

 *
 *
 *
 *
 *

Note:
Tablespaces migrated from DB2 V9.1/V9.5 to V9.7 won't get upgraded directly to use the reclaimable storage feature. RELATED INFORMATION
 Reclaimable storage [http://publib.boulder.ibm.com/infocenter/db2luw/v9r7/index.jsp?topic=/com.ibm.db2.luw.admin.dbobj.doc/doc/c0055392.html]

Question:
DB2 Non Reclaimable Storage . We have tablespaces defined under DB2 9.5 that apparently are not able
to reclaim storage back to the OS.
Is there a conversion available without reloading the tables?

Answer: Tablespaces migrated from DB2 V9.1/V9.5 to V9.7 won't get upgraded directly to use the reclaimable storage feature.


IBM What are the supported Apple Macintosh Operating System Versions for IBM SPSS Statistics? - United States SPSS mac macintosh Apple Macintosh statistics OS supported version compatibility matrix leopard Snow Leopard Lion Mountain Lion 10.8 Mavericks 10.9 22 Yosemite 10.10 (Yosemite) el capitan 10.11 spss 24 Sierra 10.12 High Sierra 10.13 TECHNOTE (FAQ)

QUESTION
 I would like to know what are the supported Macintosh Operating system versions for IBM SPSS Statistics versions?

ANSWER
Please see the list below. It is strongly recommended to review the platform information on IBM Software Product Compatibility Reports [http://publib.boulder.ibm.com/infocenter/prodguid/v1r0/clarity/index.jsp]. The installation of IBM SPSS Statistics software on Apple Macintosh OSX operating systems requires an Intel processor.

A) Apple Macintosh MacOS High Sierra (10.13)

Support for IBM SPSS Statistics 25 only. Please note that no other SPSS release will be officially supported on High Sierra, but older versions like SPSS Statistics 24 may run as well on High Sierra.

NOTE: There's a known issue with some of the earlier release of Mac High Sierra system (13.0 and 13.1 beta version).
The top menu of SPSS 25 may disappear if the Mac OS system is set to Non-English.
The official MacOSX 10.13.1 version do not have this issue. So, if you encountert this issue you need to update your Mac OS version to latest official 10.13.1 build from Apple.

B) Apple Macintosh MacOS Sierra (10.12)

Support for IBM SPSS Statistics 25 and IBM SPSS Statistics 24 only. For release 24 It is also recommended to install the latest FixPack 2 for release 24 on Mac [http://www-01.ibm.com/support/docview.wss?uid=swg24043574]. [http://www-01.ibm.com/support/docview.wss?uid=swg24042675]

No older SPSS Statistics releases are supported on Sierra.

C) Apple Macintosh OSX El Capitan (10.11)

Support for IBM SPSS Statistics 24. Please see the Release notes - IBM SPSS Statistics 24.0 [http://www-01.ibm.com/support/docview.wss?uid=swg27047057] for known issues on Macintosh.

Full documentation including installation material provided in different languages and manuals for release 24 can be found on IBM SPSS Statistics 24 Documentation [http://www-01.ibm.com/support/docview.wss?uid=swg27047033] webpage.

Also, Support for IBM SPSS Statistics 23. Note: if you want to install on El Capitan, please refer to technote 1970391 [http://www-01.ibm.com/support/docview.wss?uid=swg21970391]

D) Apple Macintosh OSX Yosemite (10.10)

Support for IBM SPSS Statistics 24, IBM SPSS Statistics 23 and IBM SPSS Statistics 22

Note: Mac OSX 10.10 (Yosemite) was released on Thursday, October 16th 2014 by Apple after Statistics 22 was released. If you like to use Statistics 22 on Yosemite you need to install Statistics 22 Fixpack 2 as well. Statistics 22 FixPack 2 and release Statistics 23 are fully tested on Yosemite OSX 10.10. So if you like to run Statistics 22 on Yosemite please install Statistics 22 FixPack 2 and also read the section below:

****

In some instances it can be necessary to re-install the legacy Apple Java 6 on 10.10 for the use of Statistics 22 FixPack 2 on this platform

Download and re-install Apple Java 6

- After you upgraded your Apple Mac OSX from a previous release to 10.10, Apple Java 6 may no longer exists on your upgraded system. If you then launch Statistics 22 which is an application that relies on Java 6, it can happen, the Mac OS pops up a dialog box stating Java 6 was requested, but none is present.
- The Java dialog has a "More Info" button, which when clicked opens a browser to an Apple Tech Support page for Apple Java 2014-001. A download link is provided:
http://support.apple.com/kb/dl1572 [http://support.apple.com/kb/dl1572]
- Click on the download link and a DMG containing the Java 6 installer is downloaded.
- Then you open the Java DMG, double click on the Java installer, follow the prompts and complete the installation of Java 6.

*******

E) Apple Macintosh OSC Mavericks (10.9)

Support for IBM SPSS Statistics 23 and IBM SPSS Statistics 22

***

Note: IBM SPSS Statistics 22 was developed and released prior to Apple's release of OS X 10.9 (Mavericks). However, Statistics 22 can be installed on Mac OSX 10.9 if you install Apple Java SE 6 (1.6.0_65) on OS X 10.9 first before you install Statistics 22. Please see http://support.apple.com/kb/dl1572 [http://support.apple.com/kb/dl1572] for download.

****

F) Apple Macintosh OSX Mountain Lion (10.8)

Support for IBM SPSS Statistics 22 and IBM SPSS Statistics 21

****

G) Apple Macintosh OSX Lion (10.7)

Support for IBM SPSS Statistics 21

H) Apple Macintosh OSX Snow Leopard (10.6)

Support for IBM SPSS Statistics 21

Older SPSS Statistics releases 18 and 19 and 20:

Please note that SPSS Statistics releases 18, 19 and 20 are no longer supported by IBM. Please contact IBM Sales department to renew your contracts.

RELATED INFORMATION
 Need more help? Our Statistics forum is Live! [https://developer.ibm.com/answers/topics/statistics.html?smartspace=predictive-analytics]

Question:
SPSS free trial not working on MAC - gets stuck in when it should be launching and goes nowhere

I downloaded the SPSS software on my mac running Yosemite 10.10.5. The trial was activated by IBM, they sent me several emails stating this.

So I tried to launch the app and get stuck here alt text There is no progress after an hour; and I tried to launch several times, it never gets out of this screen.

Answer: If you like to use Statistics 22 on Yosemite you need to install Statistics 22 Fixpack 2 as well. Statistics 22 FixPack 2 and release Statistics 23 are fully tested on Yosemite OSX 10.10. So if you like to run Statistics 22 on Yosemite please install Statistics 22 FixPack 2 and also read the section below:


IBM DB2 UDB Version 8, v10.5 compliance with FIPS 140-2 standard - United States  TECHNOTE (FAQ)

QUESTION
 Is DB2 v8, v10.5 compliant to FIPS 140-2 ?.

ANSWER

Is DB2 v10.5 compliant with FIPS 140-2?

Q: Is DB2 vulnerable to the problem described below?

V-58165 DBMS main in the middle attack [https://www.stigviewer.com/stig/database_security_requirements_guide/2015-06-23/finding/V-58165]

"One class of man-in-the-middle, or session hijacking, attack involves the adversary guessing at valid session identifiers based on patterns in identifiers already known. The preferred technique for thwarting guesses at Session IDs is the generation of unique session identifiers using a FIPS 140-2 approved random number generator. However, it is recognized that available DBMS products do not all implement the preferred technique yet may have other protections against session hijacking. Therefore, other techniques are acceptable, provided they are demonstrated to be effective. "

A: No because DB2 does not use session ids for authentication and thus not vulnerable to the attack described above. DB2 uses encryption modules which are FIPS 140-2 certified.

DB2 v8.x compliancy to FIPS 140-2

DB2 v8.x went out of support in April 2009.

What is ICC?

ICC (IBM Crypto for C) is a set of libraries from Tivoli® for performing encryption. As of DB2® Universal Database™ (DB2 UDB) Version 8 fixpak 7 (equivalent to DB2 UDB Version 8.2), DB2 is using ICC on most platforms.

Customers who need to operate in an environment that is compliant with FIPS 140-2 federal standard should take into account the releases of ICC that are shipped by DB2 on different platforms and the compliance status of those releases with FIPS 140.2.

Following is a list of platforms on which DB2 is using ICC for encryption of data flowing between clients and servers:

DB2 V8 Fixpak 7 through DB2 Fixpak 11:
ICC Version 1.2.2 on platforms:
AIX 32 bit
HP-UX PA-RISC 32 bit
ICC Version 1.2.1 on platforms:
AIX 64 bit
HP-UX PA-RISC 64 bit
HP-UX IA64
Linux x86, Linux x86-64, Linux IA64
Linux for zSeries
Linux for POWER
Windows x86 and IA64
Solaris SPARC 64 bit
ICC Version 1.3.9 on platforms:
Solaris x86-64 (DB2 V8.2 GA)

DB2 V8 Fixpak 12 and later:
ICC Version 1.4.1 on platforms
AIX
HP-UX PA-RISC
Linux x86 and x86-64
Linux for zSeries
Linux for POWER
Windows x86 and x86-64
Solaris SPARC
ICC Version 1.3.9 on platforms
HP-UX IA64
Linux IA64
Windows IA64

Summary of known problems encountered in ICC 1.2.1/1.2.2:
There are a number of issues with DB2 and the ICC encryption libraries at levels prior to 1.3.9. The known problems are:

 1. Severe performance problems where processes seem to hang, or take several minutes to run.
 2. A bug in ICC code causes it to communicate with the OpenSSL EGD (Entropy Gathering Daemon) which under certain circumstances could hang
 3. ICC symbols have not been namespaced and DB2 can end up with symbol collisions with OpenSSL code. This can also happen when multiple versions of ICC are used within the same process.

DB2 Version 8 Fixpak 12 and later incorporates IBM Crypto for C (ICC) version 1.3.9 or 1.4.1 cryptographic module which fixes these problems.

Note: The latest status of ICC conformance with FIPS 140-2 standard can be obtained by referring to http://www.ibm.com/security/standards/st_evaluations.shtml [http://www.ibm.com/security/standards/st_evaluations.shtml]

RELATED INFORMATION
 FIPS PUB 140-2 [http://csrc.nist.gov/publications/fips/fips140-2/fips1402.pdf]

Question: Does DB2 DBMS implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures? Does DB2 DBMS implement NIST FIPS 140-2 validated cryptographic modules to provision digital signatures? If so, how can we utilize it?

Answer: No because DB2 does not use session ids for authentication and thus not vulnerable to the attack described above. DB2 uses encryption modules which are FIPS 140-2 certified.


IBM Application running on a DB2 client performs poorly due to low level semget calls issued by DB2 - United States db2trc alloc; semget TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 This document provides troubleshooting information for the situation where an application running on a remote DB2 client performs poorly. In particular, it describes a scenario where performance is poor because of failed semget() calls to the operating system.

CAUSE
DB2® Universal Database™ (DB2 UDB) has an internal trace facility called "db2trc". This trace facility acquires Inter Process Communication (IPC) resources (both semaphore and shared memory). Even though a DB2 trace is not turned on, it may issue semget() calls to the operating system. These calls will fail, though, since no IPC resources were acquired.

RESOLVING THE PROBLEM
The trace facility has an "alloc" option that can allocate necessary IPC resources. When you issue db2start, internal functions equivalent to command db2trc alloc are automatically issued, and when you issue db2stop, the trace segment will be removed if no one is using it.

Since a DB2 client does not necessarily have the ability to perform the db2start command, no IPC's will be automatically allocated for the trace facility, and hence the problem.

The solution is to issue the following command at the DB2 client:

db2trc alloc

This will then create the necessary IPC resources, and prevent the semget() calls from failing (since the semget() call now has IPC resources that it can use). The potential performance problem will thus be avoided.

The failed semget() operations are more of a concern for Solaris Operating Environment, Linux®, HP-UX and AIX® operating systems, in terms of performance implications. Windows® will not have this problem due to its specific architecture.

The db2trc alloc command should be invoked every time the client is restarted, and therefore it is recommended to add this command to a startup script.

Note: To determine if the application is issuing semget() calls, the best course of action would be to take a "truss". Please read your operating system manuals on how to perform and read a truss.

RELATED INFORMATION
 IC85712 (AIX) [http://www-01.ibm.com/support/docview.wss?crawler=1&uid=swg1IC85712]
FP5: db2trc command has been improved for clients (Linu [http://publib.boulder.ibm.com/infocenter/db2luw/v9r7/topic/com.ibm.db2.luw.wn.doc/doc/c0059466.html]
v10.5 IT17501 [https://www-01.ibm.com/support/entdocview.wss?uid=swg1IT17501]
v11.1 IT17518 [https://www-01.ibm.com/support/entdocview.wss?uid=swg1IT17518]

Question: How do I resolve a performance issue with my applicaiton running on a DB2 client as a result of low level segement calls issued by DB2? Currently experiencing a performance issue with an application running on a DB2 client, the stack traces reveals that multiple segment() calls are being issued by DB2 and they are failing. What can be done to resolve this issue?

Answer:
The solution is to issue the following command at the DB2 client:

db2trc alloc

This will then create the necessary IPC resources, and prevent the semget() calls from failing (since the semget() call now has IPC resources that it can use). The potential performance problem will thus be avoided.

The failed semget() operations are more of a concern for Solaris Operating Environment, Linux®, HP-UX and AIX® operating systems, in terms of performance implications. Windows® will not have this problem due to its specific architecture.

The db2trc alloc command should be invoked every time the client is restarted, and therefore it is recommended to add this command to a startup script.


IBM Security Bulletin: Security Vulnerability in IBM PureApplication System. (CVE-2015-1920) - United States  SECURITY BULLETIN

SUMMARY
 IBM PureApplication System contains IBM WebSphere Application Server, which has a security vulnerability that could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions.

VULNERABILITY DETAILS
CVEID: CVE-2015-1920 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1920]
DESCRIPTION: WebSphere Application Server could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions.
CVSS Base Score: 9.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/102404 [https://exchange.xforce.ibmcloud.com/vulnerabilities/102404] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C)

Please consult the security bulletin: Security Vulnerability in IBM WebSphere Application Server [http://www-01.ibm.com/support/docview.wss?uid=swg21883573]for additional vulnerability details and information

AFFECTED PRODUCTS AND VERSIONS
IBM PureApplication Server bundles WebSphere Application Server in its Web Application Pattern.

IBM PureApplication System V2.1
IBM PureApplication System V2.0
IBM PureApplication System V1.1

REMEDIATION/FIXES
The solution is to apply an update to the Web Application pattern type included in IBM PureApplication System:

IBM PureApplication System V2.1
· Web Application Pattern Type V2.0.4.2
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=All&platform=All&function=fixId&fixids=webapp-2.0.4.2-sys&includeSupersedes=0&source=fc [http://www.ibm.com/support/fixcentral/swg/quickorder?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=All&platform=All&function=fixId&fixids=webapp-2.0.4.2-sys&includeSupersedes=0&source=fc]

· Web Application Pattern Type V1.0.4.2
http://www.ibm.com/support/fixcentral/swg/quickorder?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=All&platform=All&function=fixId&fixids=webapp-1.0.4.2-sys&includeSupersedes=0&source=f [http://www.ibm.com/support/fixcentral/swg/quickorder?parent=PureSystems&product=ibm/WebSphere/PureApplication+System&release=All&platform=All&function=fixId&fixids=webapp-1.0.4.2-sys&includeSupersedes=0&source=f]

IBM PureApplication System V2.0
The solution is to upgrade to IBM PureApplication System V2.0.0.1 Interim Fix 5

IBM PureApplication System V1.1 and earlier:
Contact IBM customer support for upgrade options.

WORKAROUNDS AND MITIGATIONS
None

GET NOTIFIED ABOUT FUTURE SECURITY BULLETINS
 Subscribe to My Notifications [ http://www-01.ibm.com/software/support/einfo.html] to be notified of important product support alerts like this.

REFERENCES
Complete CVSS v2 Guide [http://www.first.org/cvss/v2/guide]
On-line Calculator v2 [http://nvd.nist.gov/CVSS-v2-Calculator]

RELATED INFORMATION
IBM Secure Engineering Web Portal [http://www.ibm.com/security/secure-engineering/bulletins.html]
IBM Product Security Incident Response Blog [http://www.ibm.com/blogs/psirt]

ACKNOWLEDGEMENT
None

CHANGE HISTORY
 19 August 2015: Original Version Published
11 September 2015 Updated for IBM PureApplication System v2.0

*The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin.

DISCLAIMER
According to the Forum of Incident Response and Security Teams (FIRST), the Common Vulnerability Scoring System (CVSS) is an "industry open standard designed to convey vulnerability severity and help to determine urgency and priority of response." IBM PROVIDES THE CVSS SCORES "AS IS" WITHOUT WARRANTY OF ANY KIND, INCLUDING THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. CUSTOMERS ARE RESPONSIBLE FOR ASSESSING THE IMPACT OF ANY ACTUAL OR POTENTIAL SECURITY VULNERABILITY.

Question: Help with Security Bulletin: Security Vulnerability in IBM PureApplication System. (CVE-2015-1920) I need to understand details regarding "Security Bulletin: Security Vulnerability in IBM PureApplication System (CVE-2015-1920)". Where can I find this information?

Answer:
CVEID: CVE-2015-1920 [http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1920]
DESCRIPTION: WebSphere Application Server could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions.
CVSS Base Score: 9.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/102404 [https://exchange.xforce.ibmcloud.com/vulnerabilities/102404] for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C)


IBM Business Process Manager users receive errors that session has expired - United States  TECHNOTE (TROUBLESHOOTING)

PROBLEM(ABSTRACT)
 If you are using CA Wily Introscope to monitor performance in the same environment with IBM Business Process Manager, you might receive messages that a user session has expired. Before you can continue working on IBM BPM, you must log out and log in again.

CAUSE
WebSphere Application Server has session security integration enabled by default. Enabling this feature guards against the possibility of session data being hijacked by another user.
The Wily Introscope agent might try to access an active user session to monitoring purposes. Because Wily does not have the same authenticated user, the session security integration feature prevents Wily from accessing that user session.

By having a custom property named InvalidateOnUnauthorizedSessionRequestException set to true, the session manager will invalidate the active user session. This causes the "session expired" messages for the IBM BPM user. (The default value for InvalidateOnUnauthorizedSessionRequestException is false.)

DIAGNOSING THE PROBLEM
To verify you have this problem, you can turn on tracing for the Web container, the session, security, and IBM BPM using these tracing strings:

*=info:com.ibm.ws.webcontainer*=all:com.ibm.wsspi.webcontainer*=all:HTTPChannel=all:GenericBNF=all:com.ibm.ws.session.*=all:com.ibm.ws.security.*=all:com.ibm.websphere.security.*=all:com.ibm.websphere.wim.*=all:com.ibm.wsspi.wim.*=all:com.ibm.ws.wim.*=all:WLE.*=all

You might see entries in the stack trace similar to the following lines:

at com.wily.introscope.agent.servlethelper.ServletRequestHelper.getSession(ServletRequestHelper.java:286)
at com.wily.introscope.agent.servlethelper.ServletRequestHelper.get(ServletRequestHelper.java:513)
at com.wily.introscope.agent.trace.hc2.HttpServletLazyMapProvider.get(HttpServletLazyMapProvider.java:63)
at com.wily.util.adt.LazyMap.get(LazyMap.java:182)
at com.wily.introscope.agent.trace.hc2.HttpServletLazyMap.putAllParameters(HttpServletLazyMap.java:191)
at com.wily.introscope.agent.trace.hc2.HttpServletTracer.IInvocationDataParameterCallback_addParameters(HttpServletTracer.java:782)
at com.wily.introscope.agent.trace.InvocationData.addParameterCallbacks(InvocationData.java:3486)
at com.wily.introscope.agent.feature.VirtualStackFeatureHelper.fillComponentParams(VirtualStackFeatureHelper.java:157)
at com.wily.introscope.agent.feature.VirtualStackFeatureHelper.getTransanctionSnapShotFromInvocationData(VirtualStackFeatureHelper.java:235)
at com.wily.introscope.agent.feature.VirtualStackFeatureHelper.getTransactionSnapshotFromStack(VirtualStackFeatureHelper.java:75)
at com.wily.introscope.agent.feature.StallFeatureBase.reportStall(StallFeatureBase.java:50)
at com.wily.introscope.agent.feature.StallCheckBehaviorCorrect.ITimestampedRunnable_execute(StallCheckBehaviorCorrect.java:61)
at com.wily.util.heartbeat.IntervalHeartbeat$BehaviorNode.execute(IntervalHeartbeat.java:972)
at com.wily.util.heartbeat.IntervalHeartbeat.executeNextBehaviorAndCalculateSleepTime(IntervalHeartbeat.java:491)
at com.wily.util.heartbeat.IntervalHeartbeat.access$2(IntervalHeartbeat.java:445)
at com.wily.util.heartbeat.IntervalHeartbeat$HeartbeatRunnable.run(IntervalHeartbeat.java:668)
at java.lang.Thread.run(Thread.java:784)

RESOLVING THE PROBLEM
To prevent the sessions from expiring, choose one of the following options:

 * Stop the Wily agent.
 * Remove the custom property InvalidateOnUnauthorizedSessionRequestException=true by completing the following steps: 1. Log in to the administrative console.

   2. Click server_name > Session Manager > Custom properties.

   3. Select the InvalidateOnUnauthorizedSessionRequestException property, which is set to true, and delete it.
   The purpose of this setting in BPM default configuration is to "gracefully" terminate existing sessions and create new sessions in shared browser scenarios. With this setting removed, you may see temporary exceptions in cases two users share the same browser instance and try to switch identity without closing the browser in between.

   4. Click Apply and then save the master configuration.

   5. Restart the servers.

 * Disable specific Wily configurations that reuse the session IDs from existing users.

RELATED INFORMATION
 CA Technologies: Session killed by agent heartbeat [http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec1314663.aspx]

Cross reference information Segment Product Component Platform Version Edition Business Integration IBM Business Process Manager Standard AIX, Linux, Solaris, Windows 8.5.7.CF201706, 8.5.7.CF201703, 8.5.7.CF201612, 8.5.7.CF201609, 8.5.7.CF201606, 8.5.7, 8.5.6.2, 8.5.6.1, 8.5.6, 8.5.5, 8.5.0.2, 8.5.0.1, 8.5, 8.0.1.3, 8.0.1.2, 8.0.1.1, 8.0.1, 8.0 Business Integration IBM Business Process Manager Express Linux, Windows 8.5.7.CF201706, 8.5.7.CF201703, 8.5.7.CF201612, 8.5.7.CF201609, 8.5.7.CF201606, 8.5.7, 8.5.6.2, 8.5.6.1, 8.5.6, 8.5.5, 8.5.0.2, 8.5.0.1, 8.5, 8.0.1.3, 8.0.1.2, 8.0.1.1, 8.0.1, 8.0
PRODUCT ALIAS/SYNONYM
 BPM

Question:
What are the known issues with WILY software and WAS or BPM?

What are the known issues with WILY software and WAS or BPM?

Answer: If you are using CA Wily Introscope to monitor performance in the same environment with IBM Business Process Manager, you might receive messages that a user session has expired. Before you can continue working on IBM BPM, you must log out and log in again.